Documentation forAccess Rights Manager

GrantMA: Design approval processes

Administrators can spend excessive time on assigning access rights. In the standard process, the decision maker (manager) over access rights is separated from the technical implementation (administrator). The administrator does not know who should have specific rights and becomes a mere exporter of orders.

To improve approval process, combine the responsibility and technical implementation of access rights into one process. When the process is completed, only the actors necessary for the process to work are involved. ARM GrantMA uses the following workflow that only include an employee and their supervisor (data owner):

  • The employee requests access rights to needed resources using a web portal.
  • The data owner decides which requests are approved for his area of responsibility.

The GrantMA workflow includes the following advantages:

  • The administrator is no longer part of the process and can focus on his core responsibilities.
  • The data owner decides who can access which information, since he is the user who knows which employees need access to which resources required to do their job.
  • All changes are saved in the ARM logbook.

If more complex workflows with several decision-makers are required to grant access rights, you can map them as required.

Define individual approval flows

ARM GrantMA allows you to design individual approval workflows for each organizational category. You can design as many steps in the process as required. The last approver in the process is also the one making the formal change request.

  1. Log in to the ARM Web Client.

  2. In the toolbar, click Workflows > New workflow.

  3. In the Workflows screen, create a workflow.

    1. $nter a workflow name and purpose.

      For example: 

    2. Change the current approval step name or keep the default.

    3. Click Add Approver and add an approver for this approval step.

      For any approval step, you can click Add Approver add additional approvers for backup in case of an approver vacation or illness.

    4. In the next field, describe the approval step.

    5. (Optional) Click + to add an additional step.

    6. Add the additional step as needed.

    7. Click to add an additional step or to remove a step.

    8. Click Create workflow.

      ARM displays the Manage workflows screen. Your new workflow displays at the bottom of the screen.

      Click to edit a workflow. Click to delete a workflow.

Assign approval flows to resources

Each resource requires a unique approval flow. Using the ARM data owner configuration, you can connect available resources with individual approval flows.

  1. Log in to the ARM Configuration application.

  2. Click Data Owner.

  3. In the Data Owner configuration screen, navigate to the left column and select an organizational category.

  4. In the center pane under Assigned workflow, click the link and assign a workflow to a resource.